REMARKS 



In the Official Action mailed on 2 September 2005, the Examiner 
reviewed claims 1-6, 8-23, 25-40, and 42-55. Claims 1-2, 6, 8-9, 1 1-13, 17-19, 
23, 25-26, 28-30, 34-36, 40, 42-43, 45-47, 51-53, and 55 were rejected under 35 
U.S.C. §103(a) as being unpatentable over Klug et al. (USPN 5,790,785, 
hereinafter "Klug"), in view of Gasser et al. (USPN 5,224,163 hereinafter 
"Gasser"). Claims 1-6, 8-9, 11-13, 15, 17-23, 25-26, 28-30, 32 34-40, 42-43, 45- 
47, 49, and 51-55 were rejected under 35 U.S.C. §1 03(a) as being unpatentable 
over Klug in view of Gasser, further in view of Jacobs et al (USPN 5,61 1,048, 
hereinafter "Jacobs"), and further in view of Kelley et al (USPN 6,000,003 
hereinafter "Kelley"). Claims 10, 14, 16, 27, 31, 33, 44, 48, and 50 were rejected 
under 35 U.S.C. §103(a) as being unpatentable over Klug in view of Gasser, 
further in view of Jacobs, further in view of Kelley and further in view of Jones et 
al (USPN 5,623,637, hereinafter "Jones"). 

Rejections under 35 U.S.C. §103fa) 

Claims 1-6, 8-9, 1 1-13, 15, 17-23, 25-26, 28-30, 32, 34-40, 42-43, 45-47, 
49, and 51-55 were rejected under 35 U.S.C. §103(a) as being unpatentable over 
Klug in view of Gasser, further in view of Jacobs, and further in view of Kelley. 
Applicant respectfully points out that the combined system of Klug, Gasser, 
Jacobs, and Kelley teaches a system for delegating authorization using a 
delegation certificate, wherein the delegation certificate indicates that the 
workstation is authorized to speak for (i.e. to delegate) the user, because all 
systems on the network cannot be equally trusted (see Gasser, col. 13, lines 29-43, 
col. 2, lines 60-66). 

In contrast, the present invention teaches a system for authenticating a 
password request from a remote computer system to a local computer system 
(i.e. a user), wherein the password request includes computer code that when 
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run on the local computer system requests the password on behalf of the 
application on the remote computer system (see page 10, line 21 to page 1 1, 
line 3 of the instant application). Note that the present invention describes a 
method of authenticating the remote computer system which requests for the 
password from the local computer system. This is beneficial because it prevents a 
rogue application that pretends to be the remote computer system from gaining 
illegal access to the password, and subsequently the password store. More 
importantly, the present invention performs this authentication in a specific 
manner: by sending the password request in a form of an executable computer 
code. This computer code is executed on the local computer system, and the 
authentication based on the execution results can provide a very high degree of 
confidence that the password request is originated from the remote computer 
system instead of an imposter system (see page 10, lines 18-26 of the instant 
application). The actual password request is generated by this computer code 
after it has been executed. Note that sending the password request which is 
embedded in an authentication process is a much safer approach than sending the 
password request without any authentication, or sending the password request 
with a separate authentication. 

There is nothing within Klug, Gasser, Jacobs, or Kelley, either separately 
or in concert, which suggests authenticating a password request which includes 
computer code that when run on the local computer system requests the password 
on behalf of the application on the remote computer system. 

Accordingly, Applicant has amended independent claims 1,18, 35, 52 and 
55 to include the limitations from claims 2, 19, 36, and 53 to clarify that the 
present invention authenticates a password request from a remote computer 
system which includes computer code that when run on the local computer system 
requests the password on behalf of the application on the remote computer system. 
These amendments find support on page 10, line 18 to page 1 1, line 3 of the 
instant application. Claims 2, 19, 36 and 53 have been canceled without 
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prejudice. Applicant has also amended dependent claims 3, 20, 37 and 54 to 
update the dependencies of these claims because of the cancelled claims. 

Hence, Applicant respectfully submits that independent claims 1,18, 35, 
52 and 55 as presently amended are in condition for allowance. Applicant also 
submits that claims 3-6 and 8-17, which depend upon claim 1, claims 20-23 
and 25-34, which depend upon claim 18, claims 37-40 and 42-51, which depend 
upon claim 35, and claims 54 which depend upon claim 52, are for the same 
reasons in condition for allowance and for reasons of the unique combinations 
recited in such claims. 
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CONCLUSION 



It is submitted that the present application is presently in form for 
allowance. Such action is respectfully requested. 



Edward J. Grundler 

PARK, VAUGHAN & FLEMING LLP 

2820 Fifth Street 

Davis, CA 95616-7759 

Tel: (530)759-1663 

FAX: (530) 759-1665 

Email: edward@parklegal.com 



Respectfully submitted, 




Edwar<fTL Grundler 
Registration No. 47, 615 



Date: 21 November 2005 
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